Bucharest Stock Exchange World Wide Web Site Terms and Conditions of Use

Usage in any way of the World Wide Website of the Bucharest Stock Exchange is conditioned upon and subject to the following:

Proprietary Rights

The materials located on the Bucharest Stock Exchange World Wide Website, including all real time or other information and content as well as any software programs available on or through the website, are protected by copyright and other forms of proprietary rights. All right, title and interest in and to the contents are owned, licensed or controlled by the Bucharest Stock Exchange (the "BSE") or the party credited as the provider of the contents ("Third Party Provider").

Using the Contents

Except as otherwise indicated with respect to a particular portion, file, or document provided on this website, a user may only view and print one copy of the contents for its own personal, noncommercial use. The users may not copy, store, either in hardcopy or in an electronic retrieval system, transmit, transfer, perform, broadcast, publish, reproduce, create a derivative work from, display, distribute, sell, license, rent, lease or otherwise transfer any of the contents to any third person (including, without limitation, others in their company or organization) whether for direct commercial or monetary gain or otherwise without the prior written permission of the BSE or the Third Party Provider of the contents. Requests for such permission regarding BSE's contents must be in writing and should be sent to BSE. Certain Third Party Providers impose additional terms and conditions of use set forth elsewhere herein. A user of content from those Third Party Providers is also subject to those terms and conditions of use.

Disclaimers and Limitation of Liability

The Bucharest Stock Exchange cannot deal directly with the investors regarding the trading of listed securities. If users wish to invest in securities traded on the BSE, they may deal through one of the Broker Members approved by the BSE and Romanian National Securities Commission (RNSC) to trade in BSE listed/unlisted securities, also, they may contact the Custodian Members of BSE. Due to the number of sources from which the contents are obtained and the inherent hazards of electronic distribution they are provided to users on an "AS IS" basis without warranties of any kind and the BSE makes no representations about the suitability, completeness or accuracy of the information contained on this site, even it is believed to be true to the best of our knowledge using reliable sources. Neither the message, nor any opinions expressed herein, constitutes advice or a solicitation to subscribe, purchase or sell any securities. The BSE expressly disclaims any liability (whether in tort or contract or otherwise) from or in reliance upon any part of the contents of the site. It is recommended for users to seek the advice of professionals, as appropriate, regarding the evaluation of any specific security, indices, report, opinion, advice or other content. While BSE has endeavored to ensure the correctness of the information contained herein, the BSE, related companies or any of their respective employees or agents cannot and do not make any representation and to the fullest extent permitted by applicable law, hereby disclaim with respect to this website and the contents all express, implied and statutory warranties of any kind to users or any third party, including, but not limited to, representations and warranties regarding accuracy, timeliness, completeness, currentness, refresh frequency, reliability, noninfringement, merchantability or fitness for any particular purpose, or any representations or waranties arising from usage or custom or trade or by operation of law. Nor will they, to the extent permitted by law, be liable for any loss or damage arising in any way from, or in connection with, errors, delays or omissions in any information provided (including responsibility to any person by reason of negligence).

Use of Links

There are links in this site, which will let users leave the BSE's site. The linked sites are not under the control of the BSE and the BSE is not responsible for the contents of the linked site or any link contained in the linked site. The BSE is providing these links to users only as a convenience, and the inclusion of any link does not imply endorsement by the BSE of the site.

Laws and Regulations

User access to and use of this website is subject to all applicable Romanian laws and regulations.

Cookies

There is a technology called "cookies" which can be used by a website to enable its users to store tailored information from the website. A cookie can be sent to the user browser, which may then store it on user system. Some BSE pages use cookies so that BSE can better serve a client when he returns to BSE site. A cookie does not retrieve any other data from user hard drive or capture or store user e-mail address. The user can set its browser to notify him when is receiving a cookie, giving him the chance to decide whether to accept it. The user may continue browsing BSE site even if the user decide not to accept the cookie. More details at http://m.bvb.ro/Cookies.

Changes to Terms and Conditions of Use

The BSE reserves the right to revise these Terms and Conditions of Use at any time and users are deemed to be aware of and bound by any changes to these Terms and Conditions of Use upon publication on BSE website

Changes to content

The BSE reserves the rights to change without notice all products and services information contained on this site.

Restrictions

BSE webpage is designed for use in the context of ordinary navigation, navigation using a graphics program and generating a frequency of access requests specific to human capacity to process information in the appropriate context. It is forbidden to use automated programs to access the web page of BSE and / or parsing of the information contained therein. BSE reserves the right to block, without notice and without any obligation to provide explanations, the access for a particular Internet address (IP) to the BSE site for a specific period / indefinite, if it detects a behavior that cannot be justified by normal and reasonable access to BSE website or if this behavior prevents the proper functioning of systems of BSE, To retrieve electronic data from BSE, for any purpose other than for strictly personal information you need an express consent from BSE and in this regard, please address a written request to BSE, which will be treated in accordance with the BSE policy.

Violations of Terms and Conditions of Use

BSE reserves the right to seek all remedies available at law and in equity for violations of these Terms and Conditions of Use, including the right to block access from a particular Internet address to BSE site.

Bucharest Stock Exchange S.A. (hereinafter referred to as the "Stock Exchange") pays special attention to the collection, use, processing and storage of personal data with which it comes into contact in its day-to-day activity. Compliance with the legislation and alignment with the new provisions in the field of data protection has always been a priority for the company.

Starting with May 25, 2018, Regulation no. 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as „GDPR”) enters into force and it shall be applicable in all Member States of the European Union. In this respect, we adopt the Personal data protection processing policy to align with the new Community legislation.

Who can you contact if you have any questions or requests regarding the processing of your personal data?

If you have any questions or requests regarding the processing of personal data, you can contact us by sending us an email at gdpr@bvb.ro. You can also contact us by phone at (+40)(21) 307 95 00.

How do we collect personal data?

Direct: We obtain personal data directly from individuals in different modalities, including the following situations when individuals provide such data: filling in online forms, subscribing to the newsletter of the Stock Exchange, registering for the events organized by the Stock Exchange, visiting the headquarters of the Stock Exchange or sending CVs for employment on the available positions.

Indirect: We obtain personal data of individuals indirectly in different ways, including recruitment services and contractual relationships with Stock Exchange participants. We can also obtain personal data from the following sources:

Public sources: Personal data can be obtained from public registers, such as the Trade Register, news, articles, public lists of sanctions;

Social and/or professional networking sites: If you log in or register with our social media accounts (Facebook, Google, LinkedIn, etc.) on our official website to authenticate and connect to the network, we will collect information regarding your account. These categories of information can include your name, e-mail address, additional information about you;

Recruitment Services: We can obtain personal data of certain candidates for available positions within the company.

What categories of personal data do we collect?

We may collect the following categories of personal data with regard to individuals either directly or indirectly according to paragraph 3 above:

Personal data: contact information such as your first and last name, the name of the company you are working for, the position, the mobile phone number, the e-mail address. The Company's video surveillance system can collect visitors' images;

Special Data: Normally, we do not process such categories of personal data, but in cases where we process such data, we do so only with the consent of the data subject unless the processing is performed for legitimate purposes. Examples of personal data that we can process: personal documents that can reveal racial or ethnic origin or even biometric data, religious orientation, or physical and/or mental health data;

Childs’ Data: While we do not normally process personal data of children, we can occasionally receive information about children who attend, along with their parents, events organized by the Stock Exchange (eg conferences, parties, etc.);

Geolocation data: We can process personal geolocation data (geographic locations) if you are searching for the contact address of the company.

What are the legitimate grounds for data processing?

We can base our processing of personal data on the following legitimate grounds:

Consent: We may process personal data on the basis of the free and untimely consent given by the data subject. Such consent may be given concurrently with the provision of the personal data;

Legitimate interest: We may process personal data based on legitimate interest when, according to our assessment, we consider that the processing is fair, reasonable and proportionate to the purpose of the processing. Legitimate interest may include providing services to the participants on the Stock Exchange;

Legal Obligation and Public Interest: We may process personal data in order to fulfill the legal obligations of the Stock Exchange.

Why do we need personal data?

We desire to offer transparency when collecting personal data and we specify to you the purpose of the processing. The purpose can be, among others:

Sending invitations and registering guests at events organized by the Stock Exchange;

Managing, maintaining and securing the information systems and the Stock Exchange website;

Authentication of users of the Stock Exchange site;

Searching for qualified candidates, capable of occupying vacant positions within the company;

Processing the requests received online, including formulating responses to individuals' requests;

Compliance with the existing legal provisions on money laundering, terrorism financing or other forms of financial crime;

The fulfillment of the obligations occurring from the conclusion of different contracts.

Do we share personal data with third parties?

We occasionally transmit personal data to third parties in order to improve the quality of our services. Their obligations are similar to Stock Exchanges’, with respect to the protection of personal data. For instance, we can communicate personal data to the following entities:

Parties that support us as we provide our services (providers of telecommunication systems, IT systems support, archiving services, cloud-based software services);

Our advisers, including lawyers, auditors or insurers;

Marketing services providers;

Recruitment services providers;

Public authorities or third parties, in accordance with the applicable legal provisions.

Do we transfer personal data outside the European Economic Area?

We store personal data on servers in Romania. We may transfer personal data outside the European Economic Area when one or more of the Stock Exchange’s contractual partners are located outside the European Economic Area.

What are the rights of the data subjects?

As a data subject, you have the following rights:

the right to request a copy of the personal data that are possessed by the Stock Exchange;

the right to request the rectification of any inexact or out of date personal data;

the right to request the erase of the personal data when they are no longer relevant for the Stock Exchange;

if the processing is based on the consent, a contract or automatic means of decision making, the right to request to the Stock Exchange to provide for the personal data that were directly obtained from the data subject and, if applicable, to transmit these data directly to another controller (the right of data portability);

the right to retreat the processing consent at any time;

in the case of a dispute over the correctness of the processing of personal data, the right to restrict the processing;

if processing is based on legitimate interests, the right to object to the processing of personal data (where applicable);

the right to file a complaint with the supervisory authority (the National Supervisory Authority for Personal Data Processing).

Security of personal data

We have adopted technical security policies and procedures to protect personal data against loss, unauthorized use, destruction or alteration. We ensure that access to personal data is limited and authorized only to persons legally entitled to use them. These individuals have the obligation to ensure the confidentiality of the data. We can also use pseudonymisation and data anonymization techniques to protect the personal data.

When the data subjects log in into the account that has been created on our website (https://www.m.bvb.ro/LoginPage), the data subjects have the obligation to protect the confidentiality of the username and of the password.

How long do we retain personal data?

We will store the personal data necessary to provide services according to Stock Exchanges’ object of activity, to keep in touch with the data subjects and to comply with our legal obligations. The Stock Exchange will store your personal data for a period of 10 years, unless legal or contractual requirements provide for a different period.

We will dispose of personal data in a secure manner when we no longer need it.

Revision of the present Personal data protection processing policy

We will review this Privacy Policy and we will publish the revised version of the document on our website.